$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: yM7e8a5gMRoNggwHQeYaatIbwUHayuBD7MjNIJgUTFw= Subject key identifier: CA:FA:17:15:06:A8:60:EC:3A:B2:E8:CC:8D:55:21:8A:91:6B:D1:82 Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 067B Signing time: Sun 10 Aug 2025 22:41:20 +0000 Manifest this update: Sun 10 Aug 2025 22:41:20 +0000 Manifest next update: Sun 17 Aug 2025 22:41:20 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: aY3Dnl2CnImvYLtk420qv4z5d3uCSV1JBEvyfVgYA1M=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: Aug 10 22:41:20 2025 GMT Not After : Aug 17 22:41:20 2025 GMT Subject: CN=68992010-e8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:8d:51:03:e7:63:34:e8:88:d0:05:1a:31: 97:f1:b7:c7:20:1a:67:35:62:d6:c7:97:60:26:89: 54:b9:3f:5d:81:01:9a:07:db:f0:56:93:19:2d:ed: 4d:4f:c7:fb:e9:fb:e5:5b:ea:fc:54:5c:de:cf:d3: 15:80:9e:e8:90:50:cd:26:1e:33:fc:63:55:61:d7: 4a:fa:a6:a2:34:37:2c:34:62:35:ed:b0:42:3c:85: 7d:9c:ab:52:02:6d:0a:38:70:c0:ea:99:c5:44:c1: de:49:88:a6:75:ca:18:35:ee:32:84:ed:af:19:13: f5:56:58:1d:06:4f:db:4d:5e:4e:61:b6:98:84:f3: 26:9f:62:e2:07:d2:57:94:6f:a0:d2:c4:ce:d3:fd: b3:ec:1e:16:bf:49:0e:c7:bd:99:39:15:c4:d5:1e: b1:c6:7a:ec:52:1b:66:bd:32:72:09:80:6e:2d:c5: a2:f9:6a:93:11:4e:73:24:c0:94:ab:2f:4a:a9:c1: 75:ac:ab:bb:dc:9e:87:14:e3:3b:24:eb:cd:67:f1: 52:7f:31:60:f0:17:61:6f:a0:e0:65:b2:26:ba:62: f6:b6:06:23:6d:19:71:27:eb:fb:43:6e:43:4b:bf: 54:35:0f:62:2d:18:a5:cb:c5:8c:e3:52:06:a8:51: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FA:17:15:06:A8:60:EC:3A:B2:E8:CC:8D:55:21:8A:91:6B:D1:82 X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6a:ca:81:d2:e0:35:5c:0c:b6:e0:90:0b:bd:c6:a6:6d:af: 2d:1f:65:88:5b:07:08:36:91:41:c8:e6:6b:ed:b5:ab:8b:6a: 77:2a:c8:9c:dd:7d:46:ff:d9:f1:9f:1f:6b:13:1c:27:8f:e0: 7c:5b:0e:1c:6e:51:a8:3a:5d:a5:55:39:bd:ec:63:08:38:d5: e4:94:71:25:65:c3:0d:a2:d1:76:4d:cf:b5:c7:c1:43:f9:bb: 20:c3:c4:02:85:6d:73:3e:1a:fb:97:33:fe:f4:bb:80:57:cc: 02:a5:ee:8c:49:13:20:b7:0f:be:29:0c:c8:b1:3d:4a:67:26: 7e:bf:eb:1a:3f:fc:93:65:fb:17:12:a4:cf:16:f1:fb:67:34: d8:ac:ed:2b:21:9b:92:ac:23:95:12:72:79:ae:97:32:96:54: d1:1e:66:8b:f4:13:88:54:5e:0f:28:c2:84:ce:6b:f6:7c:ae: 73:f5:01:99:b3:85:4e:77:6c:ca:2b:20:6c:38:74:88:b8:79: 75:13:0b:bf:db:7d:cd:1a:21:11:84:e5:90:e1:d0:51:8d:fc: 07:ca:ea:69:4a:aa:5d:b9:3f:02:65:c1:54:f2:ab:75:e4:f8: 6e:93:b6:97:b6:ad:aa:e9:0b:aa:81:bf:c6:6b:7e:f7:65:2c: f8:26:e7:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUwODEwMjI0MTIwWhcNMjUwODE3MjI0MTIwWjAYMRYwFAYD VQQDEw02ODk5MjAxMC1lOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwniNUQPnYzToiNAFGjGX8bfHIBpnNWLWx5dgJolUuT9dgQGaB9vwVpMZLe1N T8f76fvlW+r8VFzez9MVgJ7okFDNJh4z/GNVYddK+qaiNDcsNGI17bBCPIV9nKtS Am0KOHDA6pnFRMHeSYimdcoYNe4yhO2vGRP1VlgdBk/bTV5OYbaYhPMmn2LiB9JX lG+g0sTO0/2z7B4Wv0kOx72ZORXE1R6xxnrsUhtmvTJyCYBuLcWi+WqTEU5zJMCU qy9KqcF1rKu73J6HFOM7JOvNZ/FSfzFg8Bdhb6DgZbImumL2tgYjbRlxJ+v7Q25D S79UNQ9iLRily8WM41IGqFHRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr6FxUG qGDsOrLozI1VIYqRa9GCMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPasqB0uA1XAy24JALvcamba8tH2WIWwcINpFByOZr7bWri2p3Ksic 3X1G/9nxnx9rExwnj+B8Ww4cblGoOl2lVTm97GMIONXklHElZcMNotF2Tc+1x8FD +bsgw8QChW1zPhr7lzP+9LuAV8wCpe6MSRMgtw++KQzIsT1KZyZ+v+saP/yTZfsX EqTPFvH7ZzTYrO0rIZuSrCOVEnJ5rpcyllTRHmaL9BOIVF4PKMKEzmv2fK5z9QGZ s4VOd2zKKyBsOHSIuHl1Ewu/233NGiERhOWQ4dBRjfwHyuppSqpduT8CZcFU8qt1 5Phuk7aXtq2q6Quqgb/Ga373ZSz4Jude -----END CERTIFICATE-----Generated at Mon Aug 11 07:33:59 2025 by rpki-client